CWE-89 · SQL Injection (page 89)
Page 89 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3696 | Medium | 6.3 | 2024-04-12 | A vulnerability was found in Campcodes House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file vi… |
CVE-2024-3691 | High | 7.3 | 2024-04-12 | A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2024-3690 | Medium | 6.3 | 2024-04-12 | A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Chang… |
CVE-2024-3704 | Critical | 9.8 | 2024-04-12 | SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQ… |
CVE-2024-3688 | Medium | 6.3 | 2024-04-12 | A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code… |
CVE-2024-3685 | Medium | 6.3 | 2024-04-12 | A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php. The mani… |
CVE-2024-3211 | High | 8.8 | 2024-04-12 | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ec_addtocart shortcode in all vers… |
CVE-2024-22719 | High | 8.1 | 2024-04-11 | SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client. |
CVE-2024-31678 | Critical | 9.8 | 2024-04-11 | Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file. |
CVE-2024-3621 | Medium | 4.7 | 2024-04-11 | A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part… |
CVE-2024-3620 | Medium | 4.7 | 2024-04-11 | A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this issue is some unknow… |
CVE-2024-3619 | Medium | 4.7 | 2024-04-11 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability i… |
CVE-2024-3618 | Medium | 4.7 | 2024-04-11 | A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown functi… |
CVE-2024-3617 | Medium | 4.7 | 2024-04-11 | A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some… |
CVE-2024-31356 | High | 7.6 | 2024-04-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log.This issue affects User… |
CVE-2024-31355 | High | 8.5 | 2024-04-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow… |
CVE-2024-3540 | Medium | 6.3 | 2024-04-10 | A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-3539 | Medium | 6.3 | 2024-04-10 | A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-3538 | Medium | 6.3 | 2024-04-10 | A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/add… |
CVE-2024-3537 | Medium | 6.3 | 2024-04-10 | A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/a… |
CVE-2024-3536 | Medium | 6.3 | 2024-04-10 | A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin… |
CVE-2024-3535 | High | 7.3 | 2024-04-10 | A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.p… |
CVE-2024-3534 | High | 7.3 | 2024-04-10 | A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionali… |
CVE-2023-50347 | Low | 3.7 | 2024-04-10 | HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malic… |
CVE-2024-3523 | Medium | 6.3 | 2024-04-09 | A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/in… |
CVE-2024-3522 | Medium | 6.3 | 2024-04-09 | A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.ph… |
CVE-2024-2871 | Medium | 6.4 | 2024-04-09 | The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3.13 due to… |
CVE-2024-2804 | Critical | 9.8 | 2024-04-09 | The Network Summary plugin for WordPress is vulnerable to SQL Injection via the 'category' parameter in all versions up to, and including, 2.0.11 due to insuff… |
CVE-2024-2344 | High | 7.2 | 2024-04-09 | The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and including, 7.11.6 due to insufficient escapin… |
CVE-2024-2342 | High | 8.8 | 2024-04-09 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the customer_id paramete… |
CVE-2024-2341 | High | 8.8 | 2024-04-09 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the keys parameter in al… |
CVE-2024-2018 | High | 8.8 | 2024-04-09 | The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, 4.6.4 due… |
CVE-2024-1990 | High | 8.8 | 2024-04-09 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to blind SQL Injection via the… |
CVE-2024-1893 | High | 8.8 | 2024-04-09 | The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in all versions up to… |
CVE-2024-0952 | High | 7.2 | 2024-04-09 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection… |
CVE-2023-6967 | High | 8.8 | 2024-04-09 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all versions up to, and including, 3.0.10 (with… |
CVE-2024-31507 | High | 8.6 | 2024-04-09 | Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php. |
CVE-2024-31506 | High | 7.5 | 2024-04-09 | Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admin_cs.php. |
CVE-2024-31370 | High | 8.5 | 2024-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-… |
CVE-2024-3466 | Medium | 5.5 | 2024-04-08 | A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function lap… |
CVE-2024-3465 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporan_filter of the f… |
CVE-2024-3464 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects the function laporan_filter of the fil… |
CVE-2024-3458 | Medium | 6.3 | 2024-04-08 | A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /adm… |
CVE-2024-3457 | Medium | 6.3 | 2024-04-08 | A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/con… |
CVE-2024-3456 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2024-3455 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2024-3445 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-3442 | Medium | 6.3 | 2024-04-08 | A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/delete… |
CVE-2024-3441 | Medium | 6.3 | 2024-04-08 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality o… |
CVE-2024-3440 | Medium | 4.7 | 2024-04-08 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-3439 | High | 7.3 | 2024-04-08 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Acco… |
CVE-2022-43216 | Critical | 9.1 | 2024-04-08 | AbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection vulnerability in the login page. |
CVE-2024-3438 | High | 7.3 | 2024-04-08 | A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Ad… |
CVE-2024-3432 | Medium | 5.5 | 2024-04-07 | A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backen… |
CVE-2024-31260 | High | 7.6 | 2024-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridg… |
CVE-2024-31241 | High | 7.6 | 2024-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress LearnPress Export Import.This issue affects Lea… |
CVE-2024-31234 | High | 8.5 | 2024-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framework.This issue affects REHub Framework… |
CVE-2024-31233 | High | 8.5 | 2024-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19… |
CVE-2024-3425 | Medium | 6.3 | 2024-04-07 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2024-3424 | Medium | 6.3 | 2024-04-07 | A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/listscore.php… |
CVE-2024-3423 | Medium | 6.3 | 2024-04-07 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/… |
CVE-2024-3422 | Medium | 6.3 | 2024-04-07 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/… |
CVE-2024-3421 | Medium | 6.3 | 2024-04-07 | A vulnerability was found in SourceCodester Online Courseware 1.0. It has been classified as critical. This affects an unknown part of the file admin/deactivat… |
CVE-2024-3420 | Medium | 6.3 | 2024-04-07 | A vulnerability was found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-3419 | Medium | 6.3 | 2024-04-07 | A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2024-3418 | Medium | 6.3 | 2024-04-07 | A vulnerability, which was classified as critical, was found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/deactiv… |
CVE-2024-3417 | Medium | 6.3 | 2024-04-07 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Courseware 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-3416 | Medium | 6.3 | 2024-04-07 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. This vulnerability affects unknown code of the file admin/editt.php… |
CVE-2024-3413 | High | 7.3 | 2024-04-06 | A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of t… |
CVE-2024-3363 | High | 7.3 | 2024-04-06 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been classified as critical. This affects an unknown part of the file admin/borro… |
CVE-2024-3362 | High | 7.3 | 2024-04-06 | A vulnerability was found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-3361 | High | 7.3 | 2024-04-06 | A vulnerability has been found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-3360 | High | 7.3 | 2024-04-06 | A vulnerability, which was classified as critical, was found in SourceCodester Online Library System 1.0. Affected is an unknown function of the file admin/boo… |
CVE-2024-3359 | High | 7.3 | 2024-04-06 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of th… |
CVE-2024-3356 | High | 7.3 | 2024-04-05 | A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been rated as critical. Affected by this issue is some un… |
CVE-2024-3355 | High | 7.3 | 2024-04-05 | A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been declared as critical. Affected by this vulnerability… |
CVE-2024-3354 | High | 7.3 | 2024-04-05 | A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown funct… |
CVE-2024-3353 | High | 7.3 | 2024-04-05 | A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This issue affects some unknown proce… |
CVE-2024-3352 | High | 7.3 | 2024-04-05 | A vulnerability has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This vulnerability affects unkno… |
CVE-2024-3351 | High | 7.3 | 2024-04-05 | A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part… |
CVE-2024-3350 | High | 7.3 | 2024-04-05 | A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue i… |
CVE-2024-3349 | High | 7.3 | 2024-04-05 | A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this vulnerability is an unkn… |
CVE-2024-3348 | High | 7.3 | 2024-04-05 | A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is an unknown function of t… |
CVE-2024-3347 | High | 7.3 | 2024-04-05 | A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-3217 | High | 8.8 | 2024-04-05 | The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and inc… |
CVE-2024-31212 | Medium | 6.7 | 2024-04-04 | InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrati… |
CVE-2024-3316 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an u… |
CVE-2024-3315 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of t… |
CVE-2024-3314 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of… |
CVE-2024-29386 | Medium | 5.4 | 2024-04-04 | projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php. |
CVE-2024-31025 | High | 7.5 | 2024-04-04 | SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component. |
CVE-2024-3259 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code… |
CVE-2024-3258 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2024-3257 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown function… |
CVE-2024-3256 | Medium | 6.3 | 2024-04-03 | A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unkno… |
CVE-2024-3255 | Medium | 6.3 | 2024-04-03 | A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the… |
CVE-2024-3254 | Medium | 6.3 | 2024-04-03 | A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown pr… |
CVE-2024-3253 | Medium | 6.3 | 2024-04-03 | A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-3252 | Medium | 6.3 | 2024-04-03 | A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin… |
CVE-2024-3251 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown fu… |